Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
File:                     jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft (raw, json)
Hash identifier:          U9Y38CtwmHrjO/x/3ZRl3xQcxC9ssWQesOtS9/Dur3Q=
Subject key identifier:   68:67:57:5A:45:1B:2E:1D:B7:65:58:68:A9:94:EA:C2:B3:A9:6D:C4
Authority key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Certificate issuer:       /CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Certificate serial:       019356BF99B645195403504180C0B8393D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
Manifest number:          01C4
Signing time:             Sat 23 Nov 2024 02:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:17 +0000
Files and hashes:         1: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl (hash: Hwvb1qeeafEk+VrVHy7LW5ptbSN0ia6EpnzgInZyOBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:99:b6:45:19:54:03:50:41:80:c0:b8:39:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
        Validity
            Not Before: Nov 23 02:00:17 2024 GMT
            Not After : Nov 24 02:00:17 2024 GMT
        Subject: CN=6867575a451b2e1db7655868a994eac2b3a96dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:bf:f7:24:c6:cf:9e:02:ac:7d:e1:02:51:
                    58:61:d0:e9:0b:73:de:b7:3f:e0:6f:04:b9:a6:22:
                    a9:76:52:cb:ca:5d:d5:b9:82:20:61:46:47:cd:3a:
                    73:08:a1:62:d8:e0:2e:3e:d8:68:86:f3:0e:c6:35:
                    34:a3:88:95:5f:05:c8:e7:ec:25:f5:6a:b3:34:85:
                    f9:54:0f:b6:02:66:0a:0d:db:93:fc:da:b0:66:09:
                    1a:60:1f:a6:5b:ea:3f:a6:bb:0b:63:05:85:e6:75:
                    a3:4b:e4:4b:5e:b0:ee:c8:d2:e3:41:78:25:c8:bd:
                    0f:bc:e9:e5:dd:75:6b:f7:2b:fb:6a:f0:76:b4:9e:
                    16:99:df:de:2d:5e:26:22:7a:9b:5f:89:61:85:57:
                    ce:7d:74:d5:50:52:28:98:f5:ea:48:ab:4a:93:f5:
                    9d:f1:1f:30:df:ad:0f:06:1b:9a:ab:e0:09:65:6c:
                    12:73:3b:2a:f3:09:7e:c8:2c:9f:44:7b:fe:a0:a2:
                    55:c1:48:9d:da:67:0c:3e:7a:00:f2:6d:18:1d:26:
                    ae:fe:93:b7:7f:d4:c3:83:0e:b3:09:85:b2:16:68:
                    c8:98:99:70:71:e5:d1:50:ec:49:9a:0e:df:c9:39:
                    e1:a4:44:7e:75:4e:23:7f:89:33:c5:57:1c:44:07:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:57:5A:45:1B:2E:1D:B7:65:58:68:A9:94:EA:C2:B3:A9:6D:C4
            X509v3 Authority Key Identifier:
                keyid:8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:e8:44:ce:3c:01:cc:25:e3:9a:94:b0:6f:11:9d:f2:2b:
         1f:63:06:db:c2:cc:28:b0:ce:23:a9:f7:8d:80:c2:30:b7:d2:
         fa:49:6a:60:0b:c8:c1:74:7d:54:87:ce:4e:7b:6a:37:65:ca:
         66:a7:18:ae:fb:65:d8:1d:20:fa:fe:33:44:7f:70:37:1b:c7:
         25:aa:e9:72:02:61:2e:5a:a6:aa:76:2d:40:b8:7e:d6:22:c1:
         d5:13:cc:bb:5d:0e:2c:d3:3a:25:d1:7a:d7:c1:2c:b4:af:95:
         8d:9e:64:b0:39:71:12:0d:d1:0f:6b:06:12:d0:8c:6d:9b:fd:
         0b:10:ba:c7:7e:5b:4e:f7:54:ae:2a:7a:39:17:59:1d:c8:a0:
         73:c6:32:cc:5f:89:af:a4:48:d9:b1:85:80:c3:66:7c:c2:ab:
         06:95:2b:84:1a:5a:af:a0:63:9d:db:6f:da:ca:37:6d:66:6c:
         41:e1:11:ff:70:04:35:96:66:dc:5b:05:d9:31:bd:73:e9:69:
         94:df:b2:ba:f4:1a:cf:bf:81:90:f8:0f:84:db:aa:ad:f6:91:
         58:b7:e6:f8:9d:0b:42:1c:ef:f3:b7:43:92:d1:f1:06:9c:36:
         84:3b:80:11:f3:19:72:5f:22:f9:53:2a:a9:fa:b6:fb:53:fc:
         b7:d3:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:07 2024 by rpki-client on console-ams.rpki-client.org